EUVD-2023-58039

Malicious code in bioql PyPI...

EUVD-2021-30295

Malicious code in bioql PyPI...

EUVD-2024-47964

Malicious code in bioql PyPI...

EUVD-2022-24885

Malicious code in bioql PyPI...

EUVD-2024-46427

Malicious code in bioql PyPI...

EUVD-2021-29794

Malicious code in bioql PyPI...

EUVD-2022-39149

Malicious code in bioql PyPI...

EUVD-2024-54933

Malicious code in bioql PyPI...

EUVD-2021-30344

Malicious code in bioql PyPI...

EUVD-2025-5957

Malicious code in bioql PyPI...

XWorm V6: Exploring Pivotal Plugins

XWorm V6: Exploring Pivotal Plugins By Niranjan Hegde and Sijo Jacob · October 2, 2025 Introduction In the constantly evolving world of cyber threats, staying informed is not just an advantage; it's a necessity. First observed in 2022, XWorm quickly gained notoriety as a highly effective malware,...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

kernel: s390/sclp: Fix SCCB present check

A flaw was found in the Linux kernel's Service Call Control Program SCLP driver on s390 architectures. In certain memory configurations, the interrupt tracing mechanism fails to properly validate memory addresses prior to address translation. A local attacker could leverage this flaw to cause...

UBUNTU-CVE-2023-53428

In the Linux kernel, the following vulnerability has been resolved: powercap: armscmi: Remove recursion while parsing zones Powercap zones can be defined as arranged in a hierarchy of trees and when registering a zone with powercapregisterzone, the kernel powercap subsystem expects this to happen...

SAP NetWeaver AS Java Code Injection Vulnerability

SAP NetWeaver AS Java is a platform system from SAP, a German company. A code injection vulnerability exists in SAP NetWeaver AS Java that originates from allowing the uploading of arbitrary files, which could lead to full control of the system...

UBUNTU-CVE-2025-39694

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed after physical to virtual address...

CVE-2025-39694

The CVE-2025-39694 entry concerns the Linux kernel component s390/sclp. The vulnerability arises from an improper NULL pointer check in the SCCB present check logic used during interrupt handling: the NULL check is performed after physical-to-virtual address translation, and if the kernel identit...

CVE-2024-46917

Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g.,...

PT-2025-35243

Name of the Vulnerable Software and Affected Versions Diebold Nixdorf Vynamic Security Suite versions through 4.3.0 SR01 Description Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of the /root directory during integrity validation. This...

TOTOLINK EX1200T security vulnerabilities

The TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T suffers from an authentication bypass vulnerability that originates from formLoginAuth.htm not properly validating the login request, which can be exploited by an attacker to gain system...